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I CLAIM: 



1 1.X In a computer system connected to an external communications medium, a 

2 security device comprising: 

3 a programmable firewall device interposed between the computer system and 

4 the external communications medium; 

5 a controller device configured within the computer system such that said 

6 controller device can access aN communications into and out of the computer system 

7 and can control the firewall to block communications between the computer system and 

8 the external communications mediunvwh^n an attempted security breach is detected; 

9 a communications device f^Xcpmmunicating instructions from said controller 

10 device to said firewall device for contromkig^aia firewall device; wherein 
On said controller device examines N:ommunications incoming to the computer 
on)2 system to detect attempted security breaches; and 

3 the controller device continuously controls the firewall during the operation of the 

4 computer system to block communications between the computer system and the 
gals external communications medium when an attempted security breach is detected. 



>2^ A computer prograrrKproduct which includes codes on a computer readable 
medium wherein codes are beihg executed by a computer system, comprising: 

a detect code operation performed by the codes on the computer readable 
medium wherein known improper cocte is detected; and 

a detect patterns operational romnne performed by the codes on the computer 
readable medium wherein a pattern of activity is detected over time. 

3. The computer program product of claim 2\and further including: 

a weighting operation performed by the coates on the computer readable medium 
wherein a weight is assigned to a detected security breach. 
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1 4. The computer program product of claim 2, wherein: 

2 a firewall is automalic^Jly reprogrammed by the codes on the computer readable 

3 medium. ^\ 

y A computer program product which includes codes on a computer readable 

2 medium wherein codes are being executed by a computer system, comprising: 

3 at least one otetect operation performed by the codes on the computer readable 

4 medium wherein a computer security breach is detected; and 

5 a weighting operation performed by the codes on the computer readable medium 

6 wherein a weight is assigned according to the importance of the security breach. 

1 6. The computer programV>roduct of claim 5, and further including: 

2 a react operation performed by the codes on the computer readable medium 

3 wherein a firewall is reprogrammed in real time to react to the security breach. 

1 Y A computer program product which includes codes on a computer readable 

2 medium wherein codes are being executed by a computer system, comprising: 

3 at least one detect operation performed by the codes on the computer readable 

4 medium wherein a computer security breach is detected; and 

5 a react operation performed by the codes on the computer readable medium 

6 wherein a firewall is reprogrammed in real time to react to the security breach. 

8. The computer program product of claim V wherein: 

said react operation reprograms the firewall according to an assigned weight, the 
assigned weight being a function of the Vype of security breach detected. 
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